[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #18925 [User Experience/Website]: Add instructions for removing the code signing parts of OS X bundles
#18925: Add instructions for removing the code signing parts of OS X bundles
-------------------------------------+--------------------------
Reporter: gk | Owner: tbb-team
Type: enhancement | Status: new
Priority: Medium | Milestone:
Component: User Experience/Website | Version:
Severity: Normal | Resolution:
Keywords: TorBrowserTeam201605 | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
-------------------------------------+--------------------------
Comment (by gk):
I've thought about this a bit and here are the requirements I came up
with:
1) We should build .dmg files as we are doing now for our QA. One idea was
to create .dmg files only after signing the packages to make the whole
process less burdensome. But that would leave us without testing the step
where users get Tor Browser out of the .dmg container on their computer.
2) We have scripts for checking the Authenticode signatures and the MAR
files signatures to make sure we did not miss a file while signing and
stripping the signatures is reproducible. We should have a script for
checking signed .dmg files as well.
3) We should provide instructions for removing code signing parts *on* OS
X systems as well.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18925#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs